CVEvulnerability

CVE-2021-4210

6.7 MEDIUM Published 2022-04-22 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-04-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-20

Description

A potential vulnerability in the SMI callback function used in the NVME driver in some Lenovo Desktop, ThinkStation, and ThinkEdge models may allow an attacker with local access and elevated privileges to execute arbitrary code.

Affected configurations

• lenovo stadia ggp-120 firmware • lenovo thinkedge se30 firmware • lenovo v540-24iwl firmware • lenovo thinkstation p520 firmware • lenovo thinkstation p310 firmware • lenovo v50t-13imb firmware • lenovo thinkstation p520c firmware • lenovo a540-27icb firmware • lenovo a540-24icb firmware • lenovo ideacentre g5-14imb05 firmware • lenovo v410z firmware • lenovo thinkcentre m910z firmware • lenovo thinkcentre m70a firmware • lenovo thinkcentre m75n firmware • lenovo thinkcentre x1 firmware • lenovo thinkcentre m900 firmware • lenovo thinkcentre m810z firmware • lenovo thinkcentre m90a gen2 firmware • lenovo thinkcentre m820z firmware • lenovo ideacentre aio 3-27itl6 firmware • lenovo ideacentre aio 3-24itl6 firmware • lenovo thinkcentre m900x firmware • lenovo thinkcentre m800 firmware • lenovo ideacentre aio 3-24iil5 firmware • lenovo thinkcentre m700 firmware • lenovo thinkcentre m700 tiny firmware • lenovo ideacentre aio 3-24ada6 firmware • lenovo ideacentre aio 3-22itl6 firmware • lenovo ideacentre aio 3-22iil5 firmware • lenovo ideacentre aio 3-22ada6 firmware • lenovo ideacentre 5-14imb05 firmware • lenovo ideacentre c5-14imb05 firmware

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References